
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier: 8AtydyOlUPW+/aqeIFWKCFpY7ffr8pBX6lG+HzSIXMA=
Subject key identifier: 43:53:61:87:CB:95:F9:F9:9B:01:BD:20:34:9D:F6:ED:FB:49:54:27
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number: 0188
Signing time: Fri 17 Apr 2026 04:11:52 +0000
Manifest this update: Fri 17 Apr 2026 04:11:52 +0000
Manifest next update: Fri 24 Apr 2026 04:11:52 +0000
Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: VfZ9OK1MAzE5KqQXC5vzoqw5YxKyAgNvpzt4LXPbkHI=)
2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: xQmsVP4QLFQ4i3YXyMm0tpulZSIAm9nn/IhZaNrB5cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Validity
Not Before: Apr 17 04:11:52 2026 GMT
Not After : Apr 24 04:11:52 2026 GMT
Subject: CN=69e1b308-c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:55:0d:5d:7a:19:91:c4:3f:2b:02:a7:59:
f0:c6:ce:35:00:46:15:7d:05:31:50:0d:bd:ed:63:
b7:9a:bf:e8:bb:b9:76:55:20:7e:b7:87:77:14:7d:
a0:a0:d3:55:7d:79:9b:66:0a:98:d2:44:c8:31:01:
4a:94:79:36:90:c8:d4:ab:62:00:11:eb:ed:08:6f:
5c:75:e3:18:0d:a4:92:8c:79:91:eb:2d:3c:30:17:
5d:c9:25:a7:0b:89:6a:d8:1b:08:f7:0a:d5:1d:63:
97:9d:ec:9d:5a:21:f0:40:b0:2a:46:40:75:5e:c2:
60:98:18:c6:ac:a5:21:83:9a:98:ce:f1:78:5c:5c:
0d:65:11:7c:4b:74:e0:96:24:39:4e:aa:44:97:ab:
b1:ac:c8:b2:f8:60:08:7b:d4:15:ef:94:cd:8a:fe:
6c:fa:ba:ce:bf:c5:7f:29:06:08:71:00:7d:2a:81:
6f:12:4d:ca:c2:34:e7:65:00:d8:2d:f2:5e:15:b3:
c3:c7:88:a2:33:71:6b:0c:45:83:5d:27:fd:98:79:
c8:13:3b:bb:8d:28:11:22:4f:66:4b:a7:13:d2:94:
52:4c:ff:ee:5a:7d:ac:ec:14:67:d7:fb:25:e2:62:
aa:eb:48:85:a0:4d:e2:56:31:96:7c:b1:61:c8:93:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:61:87:CB:95:F9:F9:9B:01:BD:20:34:9D:F6:ED:FB:49:54:27
X509v3 Authority Key Identifier:
keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:90:8a:04:45:02:88:62:bf:e1:be:3e:87:d6:53:cd:4e:00:
21:79:a0:a4:3c:5b:89:40:61:7c:40:0b:cb:22:f3:b6:26:09:
e0:3f:79:49:fc:67:de:52:cf:e3:00:4e:d0:59:e7:6b:aa:89:
0c:d9:10:ed:e6:8c:67:64:32:d6:33:5f:05:c7:60:b3:26:af:
78:25:a6:cb:85:d2:2e:50:27:70:c6:31:ac:3b:a1:a3:ce:a6:
98:e5:fd:5a:50:6e:72:fa:67:21:26:4a:a8:e2:2d:89:3f:6f:
77:7d:5d:e7:08:93:38:28:2f:41:6d:1a:37:40:79:4c:18:f9:
04:49:7b:42:ea:c6:31:a1:39:85:6b:a7:57:f4:a7:f4:c6:41:
19:1a:47:46:de:14:06:4b:01:30:92:b7:1d:52:ca:2b:dc:47:
93:cd:66:81:e7:10:22:4a:28:72:1a:36:aa:7b:f2:88:91:31:
78:80:af:b7:f2:6a:d4:b2:ba:1a:d5:ff:67:d6:5f:72:42:dd:
0f:f5:54:85:12:bc:df:b3:89:d9:ce:66:0f:43:d7:b4:6c:cb:
8c:d2:27:7e:e2:dd:26:6e:16:fb:b8:2d:87:64:cb:ab:a0:aa:
bc:90:09:b5:24:5e:c7:f3:09:31:93:9e:aa:1f:25:d5:79:b4:
1b:3a:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:00 2026 by rpki-client